What was exposed, when it happened, and which databases confirm it.
- accounts
- 41,252,288
- Breached
- September 17, 2020
- Last Update
- April 25, 2021
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In September 2020, the cashback reward program ShopBack suffered a data breach. The incident exposed over 20 million unique email addresses along with names, phone numbers, country of residence and passwords stored as salted SHA-1 hashes. The data was provided to HIBP by dehashed.com.
Compromised Info
- Email addresses
- Geographic locations
- Names
- Passwords
- Phone numbers
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the ShopBack breach?
The ShopBack breach exposed: Email addresses, Geographic locations, Names, Passwords, and Phone numbers.
When did the ShopBack breach happen?
The ShopBack breach was disclosed on September 17, 2020 and affected 41,252,288 records.
Am I affected by the ShopBack breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the ShopBack leak.